Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: GrFsWOIcKAutQLvVZGBH4hoaoce3KhQKWnIwfgb+t+E=
Subject key identifier: DE:9C:4F:14:FB:D2:5A:18:34:84:E5:C7:46:AB:BE:E7:E7:FA:E0:F3
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 019923A060E294612B1707900A6D47D87CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:02:17 +0000
Manifest this update: Sun 07 Sep 2025 10:02:17 +0000
Manifest next update: Mon 08 Sep 2025 10:02:17 +0000
Files and hashes: 1: 8TiiymF_qXe5_0OSXGhXtrvPRF8.roa (hash: GluSxaIDrro0bR3RvWbGWujqLOuubQy6kwNOc8o6hgc=)
2: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: zasAZpoCl00Iw37HWkiKxpKzGaeapUYwYMSyujH150g=)
3: wqgIahTiUfpB5-vEurFskts5IVA.roa (hash: XTqqN0VPVFji7V2+PpE1m4lwBVLsT9DZSImWN2tqtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:60:e2:94:61:2b:17:07:90:0a:6d:47:d8:7c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Sep 7 10:02:17 2025 GMT
Not After : Sep 8 10:02:17 2025 GMT
Subject: CN=de9c4f14fbd25a183484e5c746abbee7e7fae0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:87:ab:62:07:30:38:f3:d1:d5:9f:e4:6d:
8a:99:02:4c:be:b5:e6:38:dc:bc:28:b0:0d:5a:56:
ce:0d:af:55:b3:ba:90:ec:5e:d3:7b:7d:c1:c4:e8:
ca:b8:3b:77:0f:81:a1:1b:17:9b:16:a4:5d:8e:de:
79:25:8e:e1:bc:7f:da:43:e9:12:1b:78:5b:20:f4:
b8:7a:54:4f:09:21:63:87:31:a0:90:50:f3:66:9a:
e5:3a:31:fd:d6:bb:34:2f:3c:93:b7:31:97:0a:4d:
95:55:f6:3d:a2:b1:72:a5:a8:96:b9:bd:e8:83:e9:
31:48:18:a9:92:a5:cd:52:43:de:56:ea:10:bf:35:
12:38:fb:bc:77:7e:33:d2:d5:6f:2d:b0:cd:79:ec:
02:2f:ad:60:8e:cc:d6:fd:23:cc:86:c1:f0:03:e4:
15:db:ca:0b:73:86:43:85:45:8d:c4:79:5b:1b:85:
43:47:44:5b:65:ba:58:f1:4c:cf:2e:8e:2e:63:ba:
19:bd:16:47:de:64:73:28:a8:b7:e1:a0:b9:70:8e:
b8:4a:99:a0:a9:3a:3f:e2:79:36:dc:d9:6c:df:53:
38:d0:54:ae:9f:e4:10:a0:0d:28:30:25:78:c8:1a:
a0:2e:eb:e0:86:34:8c:f8:83:eb:22:53:8d:79:1a:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:4F:14:FB:D2:5A:18:34:84:E5:C7:46:AB:BE:E7:E7:FA:E0:F3
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6b:e3:4c:84:be:54:91:28:c3:1b:05:33:38:e8:51:27:95:
09:89:ef:64:ae:1d:66:64:dc:c3:38:80:a1:c7:02:35:44:60:
3f:dc:dc:e5:2f:66:45:c9:ed:c5:32:d7:85:80:48:7e:16:9c:
f6:b9:86:f4:4c:5c:6a:f0:1b:9d:d9:50:99:38:02:3e:4c:27:
30:43:68:08:3f:27:fd:b5:9e:09:5f:0b:85:0d:8e:36:70:c3:
9b:60:4a:2b:34:c2:cd:f0:72:d4:59:f3:21:0e:af:61:c9:dd:
4d:93:fd:60:38:b8:95:af:f0:db:9a:2c:b8:39:ed:b4:83:60:
28:67:3c:01:c9:ff:a1:e5:a6:3b:88:91:81:88:d7:2e:12:30:
c7:c3:01:7e:25:f0:ce:40:dc:23:26:f3:74:2a:b0:d4:e0:c9:
80:a0:cb:21:9e:64:05:30:cd:43:a0:ff:8d:6d:6c:14:52:d2:
58:a9:3a:2a:e8:fb:60:8a:09:95:46:a8:79:cf:31:61:b1:0f:
d1:7b:f4:6f:c6:d0:6a:9f:55:bf:6b:69:f2:34:bb:bf:92:a6:
9f:3b:4a:0c:41:df:da:0a:26:09:31:d2:cd:0b:96:ad:68:73:
c1:33:4f:10:58:a8:fb:6b:ba:ab:b4:7a:69:c0:9e:d4:41:da:
1d:95:ea:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:17 2025 by rpki-client